fix: deps update, also using jsdom in frontend tests#255
Conversation
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review infoConfiguration used: defaults Review profile: CHILL Plan: Pro 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThis PR updates GitHub Actions to use Changes
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
|
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
Updates dependency locks across the frontend (npm) and backend (uv) while switching frontend unit-test DOM emulation to JSDOM, and refreshes GitHub Actions artifact upload usage.
Changes:
- Frontend: bump dev tooling dependencies (Playwright, ESLint, Stylelint, Tailwind, CodeMirror theme) and replace
happy-domwithjsdom. - Backend: bump several pinned Python dependencies and update
uv.lockaccordingly (e.g.,aiokafka,google-auth,kubernetes_asyncio,pluggy). - CI: update workflows to use
actions/upload-artifact@v7.
Reviewed changes
Copilot reviewed 4 out of 6 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| frontend/package.json | Bumps frontend dev tooling deps; swaps happy-dom → jsdom. |
| frontend/package-lock.json | Regenerates npm lockfile for updated deps (includes JSDOM and related tree changes). |
| backend/pyproject.toml | Bumps pinned backend Python dependency versions. |
| backend/uv.lock | Updates resolved/locked Python dependency graph (incl. new cryptography from google-auth). |
| .github/workflows/stack-tests.yml | Updates artifact upload action major version. |
| .github/workflows/sbom-compliance.yml | Updates artifact upload action major version. |
Files not reviewed (1)
- frontend/package-lock.json: Language not supported
Comments suppressed due to low confidence (2)
.github/workflows/sbom-compliance.yml:56
- Please double-check that
actions/upload-artifact@v7is a valid, released major version and that it supports the inputs used here. If not, this will break artifact uploads in CI; consider pinning to the latest known supported major (or a commit SHA) instead.
- name: Upload SBOM Artifact
uses: actions/upload-artifact@v7
with:
name: ${{ matrix.component }}-sbom
path: ${{ matrix.component }}-sbom.spdx.json
retention-days: 5
.github/workflows/stack-tests.yml:358
- Please double-check that
actions/upload-artifact@v7is a valid, released major version and that it supports the inputs used here. If not, this will break artifact uploads in CI; consider pinning to the latest known supported major (or a commit SHA) instead.
- name: Upload Playwright report
uses: actions/upload-artifact@v7
if: always()
with:
name: playwright-report-${{ matrix.shardIndex }}
path: frontend/playwright-report/
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@backend/pyproject.toml`:
- Line 25: The pyproject dependency pin for kubernetes_asyncio is invalid
(35.0.1 doesn't exist); update the version specifier for the kubernetes_asyncio
dependency to the latest published release (kubernetes_asyncio==35.0.0) so
installs succeed, leaving aiokafka==0.13.0 unchanged; locate the
kubernetes_asyncio entry in pyproject.toml and replace the version token
accordingly.
ℹ️ Review info
Configuration used: defaults
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (2)
backend/uv.lockis excluded by!**/*.lockfrontend/package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (4)
.github/workflows/sbom-compliance.yml.github/workflows/stack-tests.ymlbackend/pyproject.tomlfrontend/package.json
|
Summary by cubic
Updates backend and frontend dependencies, switches frontend tests to jsdom, bumps CI artifact uploads to v7, and updates stylelint rules for nested selectors.
Dependencies
Migration
Written for commit 51845c2. Summary will update on new commits.
Summary by CodeRabbit